IN THE CLAIMS : 

Please AMEND claims 2-3, 6, 14, 24-27, and 32-36; and 
Please ADD claims 39-40, as shown below. 

1. (Cancelled) 

2. (Currently Amended) A method comprising: 

receivin g, by a receiver, a message from subscriber's user equipment, said 
message indicating that an address of a certificate provisioning gateway for certificate 
issuance and delivery procedure in a visited network is requested by the subscriber's user 
equipment, the certificate provisioning gateway serving at least one certificate authority, 
the message further containing the address of the certificate provisioning gateway; 

obtainin g, by a processor , in response to receiving the message, subscriber's 
location information maintained in a mobile communication system; 

determinin g, by the processor, on the basis of the subscriber's location 
information, an address of the certificate provisioning gateway; 

checkin g, by the processor, whether or not the address of the certificate 
provisioning gateway received in the message is the same as the address of the certificate 
provisioning gateway determined on the basis of the location information; and 

i fwhen they are not the same, usin g, by the processor, the address determined on 

the basis of the location information. 
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3. (Currently Amended) A method comprising: 

receivin g, by a receiver, a message from subscriber's user equipment, the message 
containing subscriber's location information and indicating that an address of a certificate 
provisioning gateway for certificate issuance and delivery procedure in a visited network 
is requested by the subscriber's user equipment, the certificate provisioning gateway 
serving at least one certificate authority; 

obtainin g, by a processor , in response to receiving the message, subscriber's 
location information maintained in a mobile communication system; 

checkin g, by the processor, whether or not the subscriber's location information 
received in the message corresponds to the subscriber's location information obtained; 
and 

usin g, by the processor, the subscriber's location information obtained to 
determine for d e t e rmining the address of the certificate provisioning gateway ifwhen the 
subscriber's location information obtained does not correspond to subscriber's the 
location information received in the message. 

4-5 (Cancelled) 

6. (Currently Amended) The method of claim 24, further comprising: 

authenticating the subscriber; and 
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transmitting during the subscriber authentication to the user equipment at least part 
of the information required to obtain for obtaining a certificate from a certificate issuance 
service in another network than a home network in a mobile communication system after 
the subscriber authentication, the part of the information including at least one from a 
group comprising an address of a certificate provisioning gateway via which the 
certificate issuance service is provided in the other network, the certificate provisioning 
gateway serving at least one certificate authority, a public key required for the certificate 
issuance service in the other network, and an indication of the protocol required for the 
certificate issuance service in the other network. 

7. (Previously Presented) The method of claim 6, further comprising: 
performing the authentication as an application level authentication. 

8. (Previously Presented) The method of claim 6, further comprising: 
utilizing said part of the information during a certificate issuance procedure after 

the authentication in a visited network by the user equipment. 

9. (Previously Presented) The method of claim 6, further comprising: 
transmitting in said part of the information location network specific information. 

10-12 (Cancelled) 
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13. (Previously Presented) The method of claim 6, further comprising, when 
said part of the information includes at least the address of the certificate provisioning 
gateway via which the certificate issuance service is provided, transmitting from the user 
equipment a certificate request to the certificate provisioning gateway. 

14. (Currently Amended) The method of claim 26, further comprising: 
authenticating the subscriber; and 

transmitting, in response to the message, to the user equipment in a reply message 
at least part of information required to obtai n for obtaining a certificate from the 
certificate issuance service in the other network, the part of the information including at 
least one from a group comprising an address of a certificate provisioning gateway via 
which the certificate issuance service is provided in the other network, the certificate 
provisioning gateway serving at least one certificate authority, a public key required for 
the certificate issuance service in the other network, and an indication of the protocol 
required for the certificate issuance service in the other network. 

15. (Previously Presented) The method of claim 14, further comprising: 
transmitting the message and the reply message in an integrity protected channel. 

16. (Cancelled) 
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17. (Previously Presented) The method of claim 14, further comprising, when 
said part of the information includes at least the address of the certificate provisioning 
gateway via which the certificate issuance service is provided, transmitting from the user 
equipment a certificate request to the certificate provisioning gateway. 

18-23 (Cancelled) 

24. (Currently Amended) A method comprising: 

receivin g, by a receiver, a message from subscriber's user equipment, the message 
containing subscriber's location information and indicating that an address of a certificate 
provisioning gateway for certificate issuance and delivery procedure in a visited network 
is requested by the subscriber's user equipment, the certificate provisioning gateway 
serving at least one certificate authority; 

obtainin g, by a processor , in response to receiving the message, subscriber's 
location information maintained in a mobile communication system; 

checkin g, by the processor, whether or not the subscriber's location information 
received in the message corresponds to the subscriber's location information obtained; 

i fwhen the subscriber's location information obtained corresponds to the 
subscriber's location information received in the message, determinin g, by the processor. 
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on the basis of the subscriber's location information the address of the certificate 
provisioning gateway; and 

i fwhen the subscriber's location information obtained does not correspond to the 
subscriber's location information received in the message, sendin g, by the processor, an 
error indication by using the subscriber's location information obtained. 

25. (Currently Amended) A method comprising: 

receivin g, by a receiver, a message from subscriber's user equipment, the message 
containing subscriber's location information and indicating that an address of a certificate 
provisioning gateway for certificate issuance and delivery procedure in a visited network 
is requested by the subscriber's user equipment, the certificate provisioning gateway 
serving at least one certificate authority; 

obtainin g, by a processor , in response to receiving the message, subscriber's 
location information maintained in a mobile communication system; 

checkin g, by the processor, whether or not the subscriber's location information 
received in the message corresponds to the subscriber's location information obtained; 

determinin g, by the processor , on the basis of the subscriber's location information 
the address of the certificate provisioning gateway, ifwhen the subscriber's location 
information received in the message corresponds to the subscriber's location information 
obtained; and 
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usin g, by the processor, the subscriber's location information received in the 
message i fwhen the subscriber's location information received in the message does not 
correspond to the subscriber's location information obtained. 

26. (Currently Amended) A method comprising: 

receivin g, by a receiver, a message from subscriber's user equipment, the message 
containing subscriber's location information and indicating that an address of a certificate 
provisioning gateway for certificate issuance and delivery procedure in a visited network 
is requested by the subscriber's user equipment, the certificate provisioning gateway 
serving at least one certificate authority; 

obtainin g, by a processor , in response to receiving the message, subscriber's 
location information maintained in a mobile communication system; 

checkin g, by the processor, whether or not the subscriber's location information 
received in the message corresponds to the subscriber's location information obtained; 

i fwhen the subscriber's location information received in the message corresponds 
to the subscriber's location information obtained, determinin g, by the processor, on the 
basis of the subscriber's location information the address of the certificate provisioning 
gateway; and 

i fwhen the subscriber's location information received in the message does not 

correspond to the location information obtained, sendin g, by the processor, an error 

indication by using the subscriber's location information received in the message. 
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27. (Currently Amended) The method of claim 25, comprising: 
authenticating the subscriber; and 

transmitting after the authentication via an authenticated channel to subscriber's 
user equipment at least part of information required for a certificate issuance service in 
another network than a home network of the subscriber, said at least part of the 
information comprising information required to obtain for obtaining a certificate from the 
certificate issuance service in the other network. 

28-31 (Cancelled) 

32. (Currently Amended) An apparatus, comprising: 
a processor configured 

to serve a certificate authority in a mobile communication system, 
to determine, in response to receiving from subscriber's user equipment a 
message indicating a request for an address of another certificate provisioning 
gateway for certificate issuance and delivery procedure, the message further 
containing an address of the other certificate provisioning gateway, an address of 
the other certificate provisioning gateway on the basis of subscriber's location 
information maintained in and obtained from the mobile communication system, 
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to check whether or not the address of the other certificate provisioning 
gateway received in the message is the same as the address of the other certificate 
provisioning gateway determined on the basis of the subscriber's location 
information, and 

i fwhen they are not the same, to use the address of the other certificate 
provisioning gateway determined on the basis of the location information. 

33. (Currently Amended) An apparatus, comprising: 
a processor configured 

to serve a certificate authority in a mobile communication system, 

to obtain, in response to receiving from subscriber's user equipment a 
message containing subscriber's location information and indicating a request for 
an address of another certificate provisioning gateway for certificate issuance and 
delivery procedure in a visited network, subscriber's location information 
maintained in the system, 

to check whether or not the subscriber's location information received in 
the message corresponds to the subscriber's location information obtained, and 

to use the subscriber's location information obtained from the system to 

determine the address of the other certificate provisioning gateway i fwhen the 

subscriber's location information obtained from the system does not correspond to 

the location information received in the message. 
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34. (Currently Amended) An apparatus, comprising: 
a processor configured 

to serve a certificate authority in a mobile communication system, 

to obtain, in response to receiving from subscriber's user equipment a 
message containing subscriber's location information and indicating that an 
address of another certificate provisioning gateway for certificate issuance and 
delivery procedure in a visited network is requested, subscriber's location 
information maintained in the system, 

to check whether or not the subscriber's location information received in 
the message corresponds to the subscriber's location information obtained, 

ifwhen the subscriber's location information received in the message 
corresponds to the subscriber's location information obtained, to determine an 
address of the other certificate provisioning gateway on the basis of the 
subscriber's location information, and 

ifwhen the subscriber's location information obtained from the system does 
not correspond to the subscriber's location information received in the message, to 
send an error indication by using the subscriber's location information obtained. 

35. (Currently Amended) An apparatus, comprising: 

a processor configured 
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to serve a certificate authority in a mobile communication system, 

to obtain, in response to receiving from subscriber's user equipment a 
message containing subscriber's location information and indicating a request for 
an address of another certificate provisioning gateway for certificate issuance and 
delivery procedure in a visited network, subscriber's location information 
maintained in the system, 

to check whether or not the subscriber's location information in the 
message corresponds to the subscriber's location information obtained, and 

to use the subscriber's location information received in the message to 
determine the address of the other certificate provisioning gateway tfwhen the 
subscriber's location information received in the message does not correspond to 
the subscriber's location information obtained. 

36. (Currently Amended) An apparatus comprising: 

a processor configured 

to serve a certificate authority in a mobile communication system, 

to obtain, in response to receiving from subscriber's user equipment a 

message containing subscriber's location information and indicating a request for 

an address of another certificate provisioning gateway for certificate issuance and 

delivery procedure in a visited network, subscriber's location information 

maintained in the system, 
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to check whether or not the subscriber's location information received in 
the message corresponds to the subscriber's location information obtained, 

to determine on the basis of the subscriber's location information the 
address of the other certificate provisioning gateway, i fwhen the subscriber's 
location information in the message corresponds to the subscriber's location 
information obtained, and 

ifwhen the subscriber's location information received in the message does 
not correspond to the subscriber's location information obtained, to send an error 
indication by using the subscriber's location information received in the message. 

37. (Previously Presented) The method as claimed in claim 2, wherein a 
certificate authority is a trusted third party. 

38. (Previously Presented) The method as claimed in claim 2, wherein a 
certificate authority is a trusted third party and does not include an authorization, 
authentication and accounting server. 

39. (New) The apparatus as claimed in claim 32, wherein a certificate authority 
is a trusted third party. 
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40. (New) The apparatus as claimed in claim 32, wherein a certificate authority 
is a trusted third party and does not include an authorization, authentication and 
accounting server. 
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